I didn't get the error when looking at the list of agents today. Looks like the update or reboot of the Wazuh server fixed it.

I figured it out. You have to use the Printer defaults button on the advanced tab. It opens the same window as shown in the OP, but it will apply it to the clients.

@travisdh1 Wazuh will even show Windows logins on CentOS 7 Machines by default.

I am working toward a zero trust network and also a better way to deal with endpoint application control on an ever-expanding distributed workforce.

I have looked at Centrify, but it seems pretty expensive, although, it also seems to be the most comprehensive.

I was looking more at BeyondTrust PowerBroker (Windows, Mac and Linux) https://www.beyondtrust.com/products/powerbroker-for-windows/

Today I found Avecto Defendpoint (Windows and Mac only) (https://www.avecto.com/defendpoint).

Right now I have one production CentOS7 box running OpenVPN AS, everything else is Windows (approx 120 clients and 20 VMs) with 6 Macs.

What type of PAM solutions have you guys worked with and would recommend (or not)?

After all that, it says that I can't login unless I add my business. When adding the business they need my DUNS number. FFS, Apple!

Now it may take up to 5 days! I just want to deploy devices. :loudly_crying_face: :face_with_open_mouth_cold_sweat:

@scottalanmiller said in Errors Building Guacamole Server on Fedora 28:

@wrx7m said in Errors Building Guacamole Server on Fedora 28:

I have noticed that there are a quite a few threads on something not working properly on Fedora 28. I guess it is just that it seems to be the preferred OS and people are using it more than others.

Likely, that and when there is a preferred OS, people start using it where it is not appropriate as well, making the numbers swell even more.

But you'll notice some of these threads are also full of "and it doesn't work on Docker, either" and similar.

True. Isn't docker also related/connected to the host OS in some ways? I mean, not completely autonomous?

@dbeato - Thanks. Maybe it didn't used to be in red.

@gjacobse - Yeah, the older style docks with a dedicated port (proprietary?) seemed to be much better/more reliable.

I recently completed a migration to Office 365. I needed to dump my Exchange 2010 on-prem server, as the hardware was EOL. The main thing you can't do if you dump the hybrid configuration is use AADConnect to sync your users/groups.

I have 17 Ruckus R610 APs and they only get rebooted when new firmware is applied.

SMB with around 25 VMs and 8TB of data . Currently have two R720XDs with OBR10 of 3.5" 7200 RPM NLSAS drives and two sockets with 128GB of RAM. I want to at least double the capabilities/capacities.

Should I be considering a couple HCI (like VXRail), or just go with traditional servers?

@travisdh1 said in Looking at New Virtual Host Servers (ESXi):

@scottalanmiller said in Looking at New Virtual Host Servers (ESXi):

@travisdh1 said in Looking at New Virtual Host Servers (ESXi):

@wrx7m What platform are they currently using? Hyper-V, ESXi, etc?

ESXi in the past too, I'm pretty sure.

The first thought that had jumped into my mind was a Scale cluster, but wasn't sure if that was overkill or not. If the environment is Hyper-V, then two more servers makes sense, whereas ESXi gets into different licensing with 4 nodes rather than 3. We really need to know a lot more about the environment too give a good recommendation.

That said, two more servers from xByte and Starwind to share storage is about the best we can do with what we know.

Yeah, we are licensed for essentials plus - 6 CPU licenses of vSphere Essentials Plus (for 3 servers with up to 2 processors each) and 1 license for vCenter Server Essentials.

A few weeks ago, I started getting reports of users where Outlook got stuck on trying to connect. This was after it was working fine. They would notice that they hadn't received any emails and that they would have messages stuck in the outbox.

This is happening on Windows 7 Pro x64 and Windows 10 Enterprise x64. With the most recent builds of Office in both 32bit and 64bit versions.

The temporary fix is usually a reboot. Sometimes, I have to remove and create a new mail profile. This is also only temporary.

I finally opened a ticket with Microsoft support. They had me download a tool at https://diagnostics.office.com/#/ and run it on the affected system. It goes through some checks for logging in, so it requires the user to login to office 365 via the tool. The first error I got was related to TLS 1.2 not being enabled. However, I have a GPO that is applied to the system with the following settings:

After moving to the next step in the tool, it suggested removing the stored credentials (something I had done in previous cases without result). This time was no exception, as it didn't fix it. I moved to the next option, which was to have the tool delete and recreate the profile. The tool prompted to login to O365 and just sat there for several minutes. I force quit it and rebooted the system. Once it came back up, we started Outlook, it prompted to use the new profile and we logged into O365 and it finally came back showing connected.

I spoke with support while creating this post. He said I should make sure that TLS 1.0 is disabled on the system but couldn't tell me why that would be showing if the GPO was applying. According to GPR run against the system, it is applying the setting mentioned above. There was also a Windows update (KB 3140245), but that was already installed. Also, if TLS were truly the cause, Windows 10 should not be affected, as 1.2 should be the default TLS version.

Who else is seeing this issue and have you managed to resolve it permanently?

Working here as of an hour ago.

I have a laptop that isn't kicking back that TLS error in that Office tool. I have tried moving another system that does get the TLS error into the same OU as the laptop and ran gpupdate /force and rebooted, also brought Windows fully current and uninstalled Webroot. Can't figure out the difference

@DustinB3403 Are you doing Office 365 integration on them?

@Obsolesce - Right, I have an edge firewall for the WAN to the LAN where all endpoints on the wired network (servers and clients) reside, but I am wondering how to move to a tighter circle to get the servers segregated from the clients.

Looking for MDM/EMM for iOS and Android (Windows is a plus).

I have been using the free Meraki systems manager for several years and am looking for something to replace it.

Currently, I am trialing Hexnode MDM. It seems decent, but I had a problem and they happened to call me to see how things were going. When explaining the problem, the promptly transferred me to a tech. He worked with me for about 2 minutes and said he would have to get back to me. That was Tuesday. I haven't heard anything since.

If I ever get through the Apple DEP verification process, I will (hopefully) be using that on the iOS side, as well as looking at AFW or whatever they call it now for Android.

@DustinB3403 said in Remote viewing software:

@black3dynamite said in Remote viewing software:

We use TeamViewer here too.

I like teamviewer but they had some shady price-jacking going on a while ago that pissed off a lot of people.

I think there was also an issue with some security that pissed people off.